SEARCH RESULTS
 
Showing 1-10 of 116 records
 
Expand article

Hannaford hit by class-action lawsuits in wake of data-breach disclosure

2008-03-20 13:00:00 by Editor in Computerworld Security News
 
Just days after Hannaford Bros. disclosed that intruders had stolen 4.2 million payment-card numbers from its systems, the grocer has already been hit by two class-action lawsuits
 
Tags: class-action lawsuits, hannaford bros, hit, million payment-card, intruders, grocer, days, systems
 
 
 
 
Expand article

Hannaford breach update: Class action lawsuits filed on behalf of victims

2008-03-21 00:00:00 by Jon Brodkin in Network World on Security
 
Class action lawsuits were filed on behalf of 4.2 million Hannaford breach victims
 
Tags: class action lawsuits, filed, behalf
 
 
 
 
Expand article

PrincipalPermissionAttribute and Static ctor Leads to DoS

2007-12-03 09:03:00 by Keith Brown in Security Briefs
 
...class level in a certain scenario under WCF. I recommended caution in my guidebook , because of the nasty type load exception that you can run into if the first request to the class is denied by the attribute Be careful about using this attribute at the class level. If the class to which you apply it happens to have a static constructor (or,...
 
Tags: class sensitive, sensitive, class, class level, static constructor, inside static constructor, class program, static constructor leads, static void
 
 
 
 
Expand article

The Austin Project

2008-01-21 22:45:39 by RSnake in ha.ckers.org web application security lab
 
...class it is far easier to communicate So I will be inviting five people to fly in and stay for five days. No cell phones, no computers, no distractions - just talking webappsec. I attended an invite only conference of this format before and it worked great, where the only open computer was the one operating the projector. Being off the grid...
 
Tags: people, competent people, project, helps people focus, austin project, austin project web-page, security, web application security, site
 
 
 
 
Expand article

SDL Training

2008-05-29 15:22:00 by sdl in The Security Development Lifecycle
 
...class I ran the SDL training program at Microsoft for a long time, and developed and taught a big chunk of the training. I spent hundreds of hours in front of thousands of developers, testers, and program managers. I got some really good reviews (and a few bad ones) on the classes I offered. And I tried to do a lot of things to try to make...
 
Tags: real behavior change, behavior, sdl, change peoples behavior, security, security guy, security defects, defects, security class
 
 
 
 
Expand article

Web 2.0 Security - The Beginning of the End or The End of the Beginning

The Article has images
2008-05-29 15:26:12 by Gunnar Peterson in 1 Raindrop
...class; and usually they all know each other, but they don't work together, and a lot of the value in the class is them sitting together for a couple of days - finding some common ground, identifying some things each other are working on and then figuring out ways to make some joint progress. This is why I like teaching the class more at a...
 
Tags: people, software security people, software security, software security team, security, security people, web, security support, architecture
 
 
 
 
Expand article

Identity Framework Probable Feature List

The Article has images
2007-12-16 06:42:00 by Keith Brown in Security Briefs
...class for your STS, (it's currently called SecurityTokenService You derive from this base class and supply a "ScopeProvider" implementation which answers (at least) two questions What type of claims your STS can issue (you have to generate a list of claim URIs that you will be issuing This is helpful for issuing managed cards, which need to...
 
Tags: informationcard login control, login control, information card serializer, information, control, user authentication methods, user, custom sts, card
 
 
 
 
Expand article

Fly through airport security with Clear, but you don't have less security?

The Article has images
2008-06-04 12:26:56 by HASH0x8b3dfdc in StillSecure, After All These Years
...class" personal escort to the front of the line and than a first class que for the metal detectors. Because I was willing to pay some money and have a background search, I got the first class treatment To me this is not a scalable solution. As more Clear passengers come on board, having a dedicated person walking me through the security line...
 
Tags: security, security line, airport security program, line, security procedures, background check, check, security obligations, background
 
 
 
 
Expand article

The Pros and Cons of LifeLock

2008-06-12 04:00:00 by Bruce Schneier in Wired Security
 
...class action lawsuits. And the stories in the media ... it's like a piranha feeding frenzy There are also a lot of errors and misconceptions. With its aggressive advertising campaign and a CEO who publishes his Social Security number and dares people to steal his identity -- Todd Davis, 457-55-5462 -- LifeLock is a company that's easy to...
 
Tags: credit reports, credit, credit card, fraud alerts permanent, fraud, credit industry, experian credit bureau, lifelock, issue credit